FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Feb 3, 2025 | Nov 29, 2024 |
| Ffmpeg | — | Upgrade to FFmpeg version 7.0 | Jun 5, 2025 | Nov 29, 2024 |
| Suse | — | Upgrade libswscale8Upgrade libswresample2Upgrade ffmpeg-7Upgrade libavfilter-develUpgrade libavresample4_0-32bitUpgrade libavfilter7_110Upgrade ffmpeg-4-libavformat-develUpgrade ffmpeg-4-libswscale-develUpgrade libavresample-develUpgrade libswresample-develUpgrade libswresample3_9-32bitUpgrade libpostproc54-32bitUpgrade libavutil55-32bitUpgrade libavdevice61Upgrade libavformat-develUpgrade libavresample3-32bitUpgrade libswscale5_9Upgrade libswscale4-32bitUpgrade ffmpeg-4-libavfilter-develUpgrade libavformat58_76-32bitUpgrade ffmpeg-4-private-develUpgrade libavcodec57-32bitUpgrade libavfilter6-32bitUpgrade libavformat58_76Upgrade libavutil59Upgrade libpostproc54Upgrade libswscale-develUpgrade libswscale4Upgrade libpostproc55_9Upgrade libavdevice-develUpgrade ffmpeg-4-libavresample-develUpgrade libavutil-develUpgrade libavcodec-develUpgrade libswresample3_9Upgrade ffmpeg-4-libswresample-develUpgrade libavutil56_70Upgrade libavdevice58_13-32bitUpgrade libavfilter10Upgrade libswresample5Upgrade libavresample3Upgrade libavformat57-32bitUpgrade libavfilter6Upgrade libavdevice57-32bitUpgrade ffmpeg-4-libavcodec-develUpgrade libavcodec58_134-32bitUpgrade libavutil55Upgrade libpostproc58Upgrade libavcodec58_134Upgrade libpostproc-develUpgrade libavformat61Upgrade ffmpeg-4-libavutil-develUpgrade ffmpeg-4Upgrade libpostproc55_9-32bitUpgrade libavdevice57Upgrade libswresample2-32bitUpgrade libavutil56_70-32bitUpgrade ffmpegUpgrade ffmpeg-4-libpostproc-develUpgrade ffmpeg-4-libavdevice-develUpgrade libswscale5_9-32bitUpgrade libavcodec57Upgrade libavfilter7_110-32bitUpgrade libavresample4_0Upgrade libavcodec61Upgrade libavformat57Upgrade libavdevice58_13Upgrade ffmpeg-private-devel | Dec 5, 2025 | Jul 17, 2025 |
| Ubuntu | — | Upgrade ffmpeg (Ubuntu Pro)Upgrade libavcodec-dev (Ubuntu Pro) | Jun 26, 2025 | Nov 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub